The most widely ones run JS. And the majority of pdf exploits are not js, but a wide mix over all the things a pdf reader supports. https://cve.mitre.org/cgi-b

The most widely ones run JS. And the majority of pdf exploits are not js, but a wide mix over all the things a pdf reader supports. https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Acrobat https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Acrobat